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Amendments to the Claims; 



This listing of claims will replace all prior versions, and listings, of claims in the 

application; 
Listin g of Claims: 

1 . (currently amended) In a nnde o perative v^ithin a network of a plurality of 
nodes, a method for perfonning cryptographic-related functions, comprising: 

executing an application program at the [[network]] node which need not be 
hi ghly secured ; 

receiving an input requiring cryptographic-related processing; 

generating a message via the apphcation program based on the input, the message 
representing one of a predefined set of messages for processing by a cryptographic 
processing component located vdthin the [[network]] node; 

transmitting the message to the cryptogr^hic processing component; and 

performing the cryptographic-related processing by the cryptographic processing 
component. 

2. (previously presented) The method of claim 1 , wherein the cryptographic- 
related processing includes at least one of: 

verifying or generating a digital signature; encrypting data; decrypting data; 
retrieving a digital certificate or certificate revocation list; verifying a certificate's 
hierarchy; self-signed certificate processing; retrieving, verifying and storing a digital 
certificate in the node; or certificate age checking. 
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3. (previously presented) The method of claim l.wherein the generating a 
message includes: 

generating a function call message via the application program, the function call 
message representing a request for performing a predetermined cryptographic-related 
function. 

4. (previously presented) The method of claim 1, further comprising: 
generating an output message via the application program, the output message 

requiring cryptographic-related processing; 

transmitting, based on the required cryptographic-related processing, one of the 
predefined set of messages to the cryptographic processing component; 

performing the cryptographic-related processing; and 

outputting the processed message. 



5. (currently amended) A computer-readable medium having stored thereon a 
plurality of sequences of instructions that may be invoked by a plurality of predefined 
messages, said instructions including sequences of instructions which, when executed by 
a processor in an environment which ne ed not be highly secure^ cause said processor to 
perform a method comprising: 

receiving an input representing one of the predefined messages; 

transmitting, based on the input, a function caU representing a request for 
cryptographic-related processing to a cryptographic processmg module executed by the 
processor; and 
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performing the cryptographic-related processing in the environment, 

6. (previously presented) The computer-readable medium of claim 5, wherein the 
performing the cryptographic-related processing includes at least one of: 

verifying or generating a digital signature; encrypting or decrypting data; 
retrieving a digital certificate or certificate revocation list; verifying a certificate's 
hierarchy; self-signed certificate processing; retrieving, verifying and storing a digital 
certificate; or certificate age checking. 

7. (canceled) 

8. (original) The computer-readable medium of claim 5, wherein the input 
represents a digitally signed network control message requiring verification. 

9. (currently amended) [[A]] Tti an environment w hich need not be highly secure, 
a cryptographic module, comprising: 

a memory configured to operate v^thin the enviro nment and to store a plurality of 
cryptographic processing programs, each program being invoked via one of a plurality of 
predefined messages; and . 

a processor configured to operate vyith in the environment and to: 

receive an input requiring cryptographic-related processing, 
generate one of the predefined messages based on the input, 
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transmit the message to a first one of the cryptographic processing 

programs, and 

perform the cryptographic-related processing. 

10. (previously presented) The cryptographic module of claim 9, wherein when 
performing the cryptographic-related processing, the processor is configured to perform 
at least one of: 

verifying or generating a digital signature; encrypting data; decryptmg data; 
retrieving a digital certificate or certificate revocation Ust; verifying a certificate's 
hierarchy, self-signed certificate processing; retrieving, verifying and storing a digital 
certificate; or certificate age checking. 

1 1 . (original) The cryptographic module of claim 9, wherein when transmitting 
the message, the processor is further configured to: 

transmit a function call to the first cryptographic processing program. 

12. (original) The cryptographic module of claim 9, wherein the processor is 
fiulher configured to: 

transmit the result of the cryptographic-related processing to an appHcation 

program. 

13. (currently amended) [[A]] In an environment which need not be highly secure, 
a cryptographic module, comprising: 
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m^<>t.e, nppr^tivft 1T1 the environment, for storing a plurality of cryptographic 
processing programs, each program being invoked via one of a plurality of predefined 
messages; 

mPflns^ o perative in the environment, for receiving an input requiring 
cryptographic-related processing; 

«T.^.^Ti^, operative in the environment, for generating one of the predefined 

messages based on the input; 

n^P^ng^ o pemtive in the environment for transmitting the message to a first one of 
the cryptogr^hic processing programs; and 

mea ns^ operative in the environment for performing the cryptographic-related 

processing. 



14. (currently amended) [[In]] A method of performing crvptogranhic-related 
functions in a node coupled to other nodes in a network environment which need not be 
highly secure , the node including an application program for handling communications 
with the other nodes, a method of performing or>ptographic - related funotiono, the method 
comprising: 

receivin g in said node within the environment an input requiring a cryptographic- 
related operation; 

generatin g in said node within the environment a predefmed message based on the 
input, the message representing one of a plurality of predefined messages usable by a 
cryptographic processing program executed by the node; 
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tratiQinittin p in said node within the enviroiunent the predefined message to the 

cryptographic processing program; and 

P^nrmin p m saiH node within the environment via the cryptographic processing 

program, the desired cryptographic-related operation. 

15. (original) The method of claim 14, further comprising: 
returning the result of the performing to the application program. 

16. (previously presented) The method of claim 14, wherein the predefined 
message includes at least one of: 

a request for digital signature generation, a request for digital signature 
verification, a request for data encryption, a request for data decryption, a request for 
retrieval of a digital certificate, a request for retrieval of a certificate revocation Ust, a 
request for verification of a certificate's hierarchy, a request for self-signed certificate 
processing, or a request for certificate age checking. 

17. (previously presented) The method of claim 16, wherein the request for 
digital signature generation includes a request for at least one of RSA signature 
generation, secret keyed MD5 signature generation, elUptic curve signature generation or 
digital signature standard signature generation. 

18. (previously presented) The method of claim 16, wherein the request for 
digital signature verification includes a request for at least one of RSA signature 



7 

PAGE 8/17 * RCVD AT 3/11/2005 5:10:04 PM CEastem Standard Time] * 8VR:U8PTO-EFXRF-1M * DNIS:8729308 * C8ID: 9727 183946 « DURATION <mm-55):06-12 



03/11/05 FRI 16:07 FAX 9727183946 



VERIZON IP 



USPATENT-AJIEND @1009 



Application Serial No. 09/591,708 
Docket No. 00-8010 



verification, secret keyed MD5 signature verification, elliptic curve signature verification 
or digital signature standard signature verification. 

19. (previously presented) The method of claim 16, wherein the request for data 
encryption includes a request for at least one of RSA based encryption or elliptic curve 
based encryption. 

20. (previously presented) The method of claim 16, wherein the request for data 
decryption includes a request for at least one of RSA based decryption or elhptic curve 
based decryption. 

21. (original) The method of claim 14, wherein the performing includes: 
accessing a remote server via the network to retrieve cryptographic-related 

information. 



22. (currently amended) A computer-readable medium that stores instructions 
executable by at least one processor in an environment whi ch need not be highly secure 
to perform a method for providing cryptographic-related functions, the method 
comprising: 

receiving in the at least one processor in the environment a first function call firom 
a predefined list of fimction calls, the predefined list of fimction calls representing 
available cryptographic-related fimctions executable by the at least one processor; 
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generating in the at least one processor in the environment a request message 
based on the first function call, the request message representing a request for processing 
by a cryptographic processing module executed by the at least one processor; 

transmitting in the at least one processor m the environment the request message 
to the cryptographic processing module; and 

performing in the at least one processor in the en vironment the cryptographic- 
related fimction. 

23. (canceled) 



9 

PA<X 10/17 * RCVD AT 3/11/2005 5:10:04 PM [Eastern Standard Time]* SVR:U^TO-EFXRF.1/4 * DN1S:872g308 * CSID:d727183d46 * DURATION (mm-ss):06-12 



This Page is Inserted by IFW Indexing and Scanning 
Operations and is not part of the Official Record 



Defective images within this document are accurate representations of the original 
documents submitted by the applicant. 

Defects in the images include but are not limited to the items checked: 

□ BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 

□ FADED TEXT OR DRAWING 

□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRJ(y scale DOCUMENTS 



M LINES OR MARKS ON ORIGINAL DOCUMENT 

□ REFERENCE(S) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 



BEST AVAILABLE IMAGES 




